| Package | Affected versions | Patched versions |
|---|---|---|
| highcharts | ≥ 8.0.0, < 8.1.1< 7.2.2 | 8.1.17.2.2 |
Versions of highcharts prior to 7.2.2 or 8.1.1 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize href values and does not restrict URL schemes, allowing attackers to execute arbitrary JavaScript in a victim's browser if they click the link.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free